[CVE-2026-57237] When the application opens a PDF and JavaScript modifies the properties of form fields, it causes th…

Descripción técnica

When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the program to become invalid. Eventually, it reads an illegal memory address, which leads to the crash of the application.

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Pdf editor, Pdf reader, Windows, Macos — Foxit, Microsoft, Apple

Debilidades (CWE)

CWE-416

Fuente oficial

Publicado en NIST NVD.